
$ rpki-client -vvf rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
File: o_EASaOTr53KRFlmZBZrh0Avgio.mft (raw, json)
Hash identifier: 4ZHQjyvcm47lnEF0bhS4IDjmNngT7ntkEWC9brjuZHY=
Subject key identifier: 27:B6:D5:95:5B:20:1D:A4:9D:33:40:D7:FE:4F:F8:13:6A:61:92:65
Authority key identifier: A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A
Certificate issuer: /CN=A91877A6/serialNumber=A3F10049A393AF9DCA44596664166B87402F822A
Certificate serial: 99
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
Manifest number: 96
Signing time: Sun 19 Apr 2026 07:02:46 +0000
Manifest this update: Sun 19 Apr 2026 07:02:46 +0000
Manifest next update: Sun 26 Apr 2026 07:02:46 +0000
Files and hashes: 1: o_EASaOTr53KRFlmZBZrh0Avgio.crl (hash: ThScMImpf7uqysPzTlRvAY31W1JTYN1tKTjvQGiMsbk=)
2: 4DC60A785C7F11F089D20138C4F9AE02.roa (hash: X8cGL1QZAJHz7KDH62TgirLobR0d4YLXS1ArwiUOvzg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl
rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91877A6, serialNumber=A3F10049A393AF9DCA44596664166B87402F822A
Validity
Not Before: Apr 19 07:02:46 2026 GMT
Not After : Apr 26 07:02:46 2026 GMT
Subject: CN=69e47e16-08d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:07:f2:67:d1:75:ee:48:2c:ec:ed:b8:74:a5:
cc:0f:45:a5:12:e0:91:7b:92:6f:23:bf:7c:a2:9c:
da:81:15:83:3f:38:ec:31:44:a2:b1:cc:f5:f1:93:
6b:33:8b:4d:f0:98:6d:da:80:ac:01:6d:a4:36:3e:
7d:83:af:c7:b7:3c:fa:a8:36:70:7f:69:f6:b6:9c:
ca:71:68:f5:3f:79:cb:37:24:7f:bb:70:e9:cd:7c:
ce:71:4b:15:04:39:8c:55:1f:cf:bb:b8:d5:04:9b:
18:48:f4:3d:66:c1:15:4c:e2:bf:26:90:fe:96:2b:
e8:ab:28:fb:38:2c:cc:77:35:d6:b1:6f:07:ec:4b:
56:37:db:45:50:9a:61:4e:ba:17:45:12:04:98:ab:
bd:63:83:88:67:24:45:bd:d2:cb:db:2d:05:7c:a9:
7c:30:e1:90:80:e8:e6:d1:66:a4:4d:27:8b:16:52:
d7:5d:33:4e:0a:01:c7:0e:98:84:3d:ab:92:4a:db:
0b:37:05:8a:59:85:6d:bb:2e:1a:39:2e:2e:ed:48:
39:d2:47:ac:9c:5a:e4:d4:28:c7:5d:8d:18:0a:39:
5c:59:bd:ba:b1:65:d5:b4:b7:d9:69:6a:80:0d:60:
95:81:29:20:2a:27:e7:49:65:e8:ca:87:d9:ce:e1:
a3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B6:D5:95:5B:20:1D:A4:9D:33:40:D7:FE:4F:F8:13:6A:61:92:65
X509v3 Authority Key Identifier:
keyid:A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:06:38:b9:59:9f:25:53:21:be:f5:77:3e:ce:9d:cb:7e:25:
14:df:e9:a9:fa:ac:8b:8b:d7:72:cf:f0:fe:dd:14:1b:8b:5a:
08:b4:9b:14:3d:72:13:7a:10:83:cc:74:21:76:c7:1a:19:cd:
69:56:2d:4c:63:46:28:3d:66:46:eb:ca:a3:ac:a7:2c:01:74:
bd:c1:82:d9:aa:82:14:05:5d:3b:29:81:8d:57:8b:90:00:29:
b8:aa:cc:8d:0e:77:c4:c3:21:53:21:e8:38:bd:c6:7a:14:bd:
03:03:40:4e:cb:13:f8:46:00:26:23:6d:b3:ee:fa:28:a4:48:
c8:a5:e1:5b:12:94:af:ec:32:f7:42:4c:f1:06:ec:da:ac:1c:
b5:5b:d7:ea:70:4d:0c:44:21:32:4c:61:e8:fc:3b:fc:eb:ec:
47:0a:dd:59:ee:51:63:03:4f:20:0c:17:c3:20:3a:b1:31:c1:
a3:3c:74:85:8c:29:02:6d:9b:63:ec:c8:cd:7a:2d:68:9e:bb:
aa:90:6b:dc:48:e7:46:fd:e0:79:df:bd:13:ab:6f:e4:cd:b7:
a2:e2:50:6d:75:45:cd:92:51:89:03:bb:3b:81:75:b7:27:a4:
9e:de:de:aa:98:56:f5:e5:ff:ad:f2:01:67:66:44:bd:ef:e2:
e9:cd:2d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:21:11 2026 by rpki-client